Elastic Security Labs Discovers Vulnerabilities in MS Smart App Control and SmartScreen

Researchers at Elastic Security Labs have uncovered a series of vulnerabilities in Microsoft Windows Smart App Control and SmartScreen. The company emphasizes that understanding these weaknesses will enable defenders to concentrate their detection efforts on critical coverage gaps. Key details of these vulnerabilities include:

• Design flaws in Windows Smart App Control and SmartScreen that allow attackers to gain initial access without triggering security warnings or popups.
• A bug in the handling of LNK files that can bypass these security controls.
• Defenders are advised to recognize the limitations of these OS features and incorporate additional detections into their security systems to mitigate these risks.